How to configure agent to send traffix via network Proxy

[Cloud8x4]

Hi,

I installed zabbix agent on a closed environment, normally cut off from the internet except we can use a proxy to connect to the internet by using following line:

export http_proxy='http://myproxy:8080'

This is NOT a Zabbix proxy.

This way I could download and install Zabbix and browse the internet when necessary.

Now I need to enable the Zabbix agent to commincate with the Zabbix server on port 10051 by going through the proxy.

Can I configure Zabbix to use a proxy like in some other programs? In Lynx, wget, ... for example you can configure the proxy to use.
Or is this solely a network related issue; should I configure the Zabbix agent to use the proxy ip as host and then port forward the traffix to the Zabbix server (I don't know if this is possible; but it might be ...)

Can anyone tell the different options (if there are any); what is possible / what is the right way to establish communication through the proxy?

Thanks in advance.

[steveboyson]

A http proxy is not a zabbix proxy since the protocol spoken is not http.
You may want to consult the docs and/or search for "zabbix proxy".

Here are some basic ideas behind Zabbix proxies:
http://www.packtpub.com/article/prox...ons-zabbix-1.8

[Cloud8x4]

Hi steveboyson,

Thank you for your fast reply.

I do not want to use a Zabbix proxy. I only have a Zabbix agent, which needs to connect to the Zabbix server through a regular network proxy.

Even if I use a Zabbix proxy, the same problem exists; the Zabbix proxy has to be able to communcate with the Zabbix server through the network Proxy.

Unless it is possible to configure the Zabbix Proxy to use the network Proxy, I don't think I can use this.

I think in my situation in the image you can replace the Zabbix Proxy by a regular Proxy.

My question is, how I configure Zabbix to use the Proxy to send traffic to the Zabbix server.

Maybe the only option is for the netwerk routing to be configured the right way so traffic is automatically forwarded the right way, but since it is possible to use configure http and ftp and probably more proxies, I was hoping it is also possbile in the Zabbix agent.

I appreciate any advice.

[steveboyson]

Again: the http protocol (as used by web proxies) is NOT THE SAME as the zabbix protocol.

I don't know if zabbix would be able to support SOCKS but at least in the default install it is not "SOCKS enabled". So you have to use a proxy by means of an "application level gateway" or you use a VPN, SSL tunnel or a similar solution.

Pls. keep in mind that you cannot expect that any $APP which uses TCP connections does work over a normal HTTP proxy.

[Cloud8x4]

I never said or expected Zabbix to use the http protocol. It was a mere example of a protocol and port for which it is possible to use a proxy.

I was hoping Zabbix agent could be configured in a similar way but apparently that's not possible.

We'll just have to configure the routing the right way.

[steveboyson]

A web proxy is using: http. Zabbix is using: it's own protocol.
What kind of "proxy" are you refering to?

[Cloud8x4]

http://en.wikipedia.org/wiki/Proxy_server#Forward_proxies

The proxy we use can be used to connect to the internet via http, port 80 or https, port 443 and via other protocols and ports. It can be used as a web proxy but it server more purposes than that alone.

[steveboyson]

If (and only: IF) your proxy does not speak http(s) only, then it should be working. In that case that proxy acts as a port forwarder.

If it is just a web proxy it will suddenly fail. It would be of much help (for you!) if you would specify what kind of proxy it is. Even the (brand) name will put some light on my mind-guessing orb device ;-)

Nota bene: just saying "it is a forwarding proxy" does not help either. All proxies which handle outgoing traffic and are offering connections to the "outbound" internet are forwarder proxies.

[leandro.os.br]

So is it possible or not?

So... is possible to configure zabbix agent to communicate with the zabbix server using network proxy (eg squid)?

In this case we are not talking about zabbix proxy!

[steveboyson]

Squid is a web proxy. Pls. read the comments before.

From wikipedia:
"Squid is a proxy server and web cache daemon. It has a wide variety of uses, from speeding up a web server by caching repeated requests; to caching web, DNS and other computer network lookups for a group of people sharing network resources; to aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including TLS, SSL, Internet Gopher and HTTPS.[4]"

Q: Does it support Zabbix' protocol?
A: NOOOOOOOOOOO!

[leandro.os.br]

Help in its flexibility as if it had to communicate via http (s) ... I'll make this feature if there is still no proposal.

Thank's!

[steveboyson]

It seems you don't really understand what the problem is.

The Zabbix protocol used between server, agent and proxy is NOT HTTP nor is it HTTPS. A change in it's protocol would break almost ANYTHING.

[leandro.os.br]

Good question!

I need to feel at ease in the availability of the zabbix agent. The idea is to allow the agent to communicate without the need for firewall configuration on the remote site. Preferably that communicates using the infrastructure of the existing internet access. If there is a non-transparent web proxy, which allows it to be configured IP and PORT of the proxy service.

Understand?

[steveboyson]

There is no web proxy on this world which could handle zabbix traffic.
You can use a VPN or a SSL tunnel (via stunnel or SSH) to wrap the zabbix traffic but this has nothing to do with proxies.

Again and (hopefully) for the last time: a web proxy cannot handle zabbix traffic between server, agents and/or zabbix proxy.

[sivann]

zabbix http gateway

You can do it using this: https://bitbucket.org/sivann/zabbix_...teway/overview